Lexology August 20, 2024
Key Takeaways:
- In March, the Office of Inspector General of the Department of Health and Human Services (OIG) published a report of its audit of Administration for Children and Families (ACF) “data hosted in certain cloud information systems.”
- The report explains that the audit is part of a series examining “whether HHS and its Operating Divisions have implemented effective cybersecurity controls for cloud information systems in accordance with Federal security requirements and guidelines.”
- Organizations subject to regulation under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule may want to consider this report in developing their HIPAA security risk analyses and risk management plans for cloud services because, even though the ACF OIG audit applied different...
Today's Sponsors
Today's Sponsor